Software vulnerability detection datasets (Function Level)

This repository contains pre-processed datasets for software vulnerability detection (based on rules applied and mentioned in the ARES'25 paper), in the CSV format.

Each source code sample includes the following 16 properties (with a few exceptions like CodeParrot and Vul4J, that contains only three fields, also mentioend below): 

index: index of code. 

vul_code: the vulnerable code (function)

is_vulnerable: the code is vulnerable (TRUE) or a patch (FALSE).

programming_language: programming language of the code.

method_name: name of the method.

file_name: name of the file where the source code is extracted.

repo_url: url of the project repository.

repo_owner: owner of the repository.

committer: developer who pushed the commit.

committer_date: date when the commit was pushed.

commit_msg: the commit message.

cwe_id: If is_vulnerable==True, the CWE id; otherwise None.

cwe_name: If is_vulnerable==True, the name of corresponding CWE; otherwise None.

cwe_description: If is_vulnerable==True, the description of corresponding CWE; otherwise None.

cwe_url: If is_vulnerable==True, the url to obtain more details of corresponding CWE; otherwise None.

cve_id: If is_vulnerable==True, the CVE id; otherwise None.

patch: the patched code (function)